Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File:                     hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier:          i+gK8ggdgKLDZ63Pe/v8Y87YxC3eJI0aWmvgoO8htrQ=
Subject key identifier:   A7:7D:47:FA:DB:D1:F7:7A:8B:6F:8D:26:94:B9:C0:6B:9E:E3:06:98
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer:       /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial:       01A0E02B00F2077C9E1F77E9F32B29DAD0F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number:          1A79
Signing time:             Sun 27 Sep 2026 00:01:49 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:49 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:49 +0000
Files and hashes:         1: 1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa (hash: z6hiEkQzG0sD38AUOglWiXkVXLhBbifg/B/a3MzT8UE=)
                          2: 4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa (hash: snRHhhCF/A70W64B8Ansk4wih7fxueYm9qlqzv1rXXE=)
                          3: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
                          4: Ncp12bGOlnl7zeDP17e5hwwIiXs.roa (hash: 8U+DuszR+o7r4oyJP5qAPzyleDSPshxobLvejlTQgog=)
                          5: OMs3SExnh8q-OfFFrIMvJ4V20rM.roa (hash: 3VJ0PQELJEdphYzfdK0KvVfZHKT8gZroOq8apM3LPBE=)
                          6: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
                          7: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: kyObOf11Gxzez9pAxSZ/HVrLRdg3Lxmh+bKMSUXulEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2b:00:f2:07:7c:9e:1f:77:e9:f3:2b:29:da:d0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
        Validity
            Not Before: Sep 27 00:01:49 2026 GMT
            Not After : Sep 28 00:01:49 2026 GMT
        Subject: CN=a77d47fadbd1f77a8b6f8d2694b9c06b9ee30698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:f5:bd:17:52:8e:a7:be:36:d3:d1:86:27:
                    85:ac:fa:f9:f5:27:96:12:55:74:38:33:f9:77:f0:
                    57:a7:ad:f3:fe:c4:dd:8a:4a:03:7f:c4:ee:28:a9:
                    6d:17:8c:03:d9:c7:a7:fd:0e:e5:90:a5:64:48:ca:
                    8a:2b:ce:19:6b:04:9d:ff:12:d5:1a:07:1a:83:ab:
                    67:92:8e:eb:66:aa:14:17:4d:e8:f1:09:bb:bb:fa:
                    4f:d5:59:99:2a:98:cc:72:71:48:87:d7:b4:92:5a:
                    b8:d8:bd:a0:2a:37:69:87:0a:4b:b4:b6:77:6d:62:
                    a4:63:17:1e:4f:fb:11:41:67:6f:78:8e:62:39:27:
                    cc:95:83:09:5e:67:06:92:a0:cb:f0:32:e0:3e:8b:
                    9b:d6:2e:ce:ea:a5:60:cd:c1:50:37:09:38:c2:70:
                    97:26:a1:95:8f:22:1a:9f:c0:c7:c8:6b:68:5b:0c:
                    3d:db:fc:47:c8:e1:28:65:0b:d1:61:30:e7:26:8e:
                    3a:6e:25:19:77:c0:1e:cd:84:86:05:65:57:18:1d:
                    69:b7:24:01:c4:dc:6c:17:44:11:7e:38:ab:2c:c6:
                    f7:38:ee:88:51:5f:88:da:bc:c3:b1:51:f7:b3:27:
                    e2:d0:2d:84:6a:4a:c3:ca:e2:25:2b:29:22:b2:22:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7D:47:FA:DB:D1:F7:7A:8B:6F:8D:26:94:B9:C0:6B:9E:E3:06:98
            X509v3 Authority Key Identifier:
                keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ec:62:8d:c7:fb:26:ba:17:4f:07:c2:3a:87:f5:3d:35:c0:
         f3:02:9a:96:f3:3a:4e:c0:d1:42:40:23:a4:94:7e:ae:29:1c:
         b4:aa:72:1f:8e:00:73:15:d5:7c:b5:da:87:ab:3b:3e:2c:08:
         cf:e4:4e:fd:63:9b:5a:9d:f1:30:76:6e:cb:68:40:a2:55:08:
         49:fa:57:86:78:7e:23:4d:f9:29:ee:93:17:da:3e:f9:ba:ed:
         48:f5:86:f6:f9:bd:f2:08:3f:b4:6f:34:19:3f:59:20:db:80:
         14:e6:67:0f:c5:1f:d5:56:7c:77:96:52:43:38:21:b0:dc:58:
         1a:ef:d3:e0:a0:bd:29:6a:72:47:e1:d7:af:ae:99:6c:fe:4b:
         36:7c:e1:7e:c6:e6:f0:c8:89:15:5e:2a:7a:35:42:a1:be:2d:
         8d:9d:ef:5f:9f:b7:b7:3d:c4:c1:28:26:10:7a:df:49:6f:e3:
         ca:62:e6:05:49:8e:3b:7f:f3:1f:ee:16:92:6b:cf:ad:4f:7b:
         c6:e0:6f:94:be:bb:f9:e1:d1:d4:ea:d9:7d:cc:3b:e4:8d:c3:
         35:0f:4f:24:17:21:aa:78:11:82:d3:b4:9f:75:e1:b5:9b:d0:
         83:c5:37:3f:c2:ee:e9:1b:b8:4a:8d:f6:0f:41:cc:e2:ce:64:
         39:59:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:27:58 2026 by rpki-client